▲ 83 r/homeassistant
Pwn2Own 2025: go2shell: Rooting Home Assistant through SSDP
Last year people seemed interested in the Home Assistant exploitation going on at Pwn2Own Ireland 2025 (https://www.reddit.com/r/homeassistant/s/labmJlNuVZ)
If you are interested in the technical details, you can read exactly how I exploited Home Assistant last year, now that the bugs are patched https://mccaulay.co.uk/go2shell-rooting-home-assistant-through-ssdp/
Pwn2Own Ireland 2026 is currently underway with many more Home Assistant exploits:
- @_McCaulay - https://x.com/thezdi/status/2107918679673540636
- @petoworks - https://x.com/thezdi/status/2107868365117436139
- @doyensec - https://x.com/thezdi/status/2107796539275878648
- @yves_bieri - https://x.com/thezdi/status/2107772741843861740
u/ArbitraryWrite — 7 days ago